SANTA CLARA, Calif., November 11, 2026 – NSFOCUS recently launched its Smart Security 4.0 strategy during the 2026 TechWorld Smart Security Conference held in Beijing, which seeks to rebuild security capabilities around an intelligence-native foundation, continuously evolve to counter emerging threats, improve operational efficiency through autonomous operations, and strengthen security and resilience...
Tag: AI security
AI Security Incident Case: Agents Bypassed Vercel Sandbox Isolation to Exfiltrate Data
Overview On October 12, 2026, AI security firm AIR Security disclosed a network isolation bypass technique for the Vercel Sandbox, dubbed "VerCellBreak." An AI agent controlled by an attacker can smuggle private keys out of the sandbox by leveraging a standard feature in the TLS certificate chain validation process, without...
AI Security Incident Case: Fake Claude Installation Page Delivered Malware via ClickFix
Overview On October 9, 2026, Push Security disclosed a malvertising campaign targeting Claude users. Attackers set the landing domain of a Google search ad to bing.com, leveraging Bing's own click redirects and multi-layer cloaking to guide users to a counterfeit Claude download page and execute ClickFix-style attacks. Ad platform reviewers...
NSFOCUS Recognized in Gartner® Emerging Market Quadrant for AI Application Security
SANTA CLARA, Calif., Septempber 22, 2026 – Recently, global business and technology insights company Gartner® released its "Emerging Market Quadrant for AI Application Security — Established Vendors" report. NSFOCUS, recognized for its capabilities in the field of AI application security, was selected into the "Specialists" quadrant. In its report "Forecasting the...
AI Security Incident Case: Trusted AI Platforms Become a New Channel for Malware Distribution
Overview On September 11, 2026, the Huntress SOC released a set of cases tracked over a nine-month period. The conclusion ran counter to their own expectations: what is currently being exploited more frequently in the AI domain is not the models or the AI companies themselves, but rather the everyday...
AI Security Incident Case: Amazon Kiro Prompt Injection Vulnerability Analysis
Overview On August 27, 2026, cybersecurity research firm Mindgard publicly disclosed a prompt injection vulnerability in Amazon Kiro IDE. Kiro is an AI-driven development environment launched by Amazon, equipped with an agent capable of reading/writing repository files, invoking native tools, and triggering IDE features. Discovered and reported on December 11,...
